Description
Affected versions of decamelize are susceptible to a denial of service vulnerability when user input is passed directly into decamelize.
Recommendation
Update the decamelize package to the latest compatible version. Followings are version details:
- Affected version(s): >= 1.1.0, <= 1.1.1
- Patched version(s): 1.1.2
References
Could your website be exposed too?
SmartScanner can check your website for Regular Expression Denial of Service in decamelize and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular Expression Denial of Service in marked - marked - CVE-2017-16114
- Regular Expression Denial of Service in timespan - CVE-2017-16115
- Regular Expression Denial of Service in debug - CVE-2017-16137
- mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input - CVE-2017-16138
You might also like:
See something that needs correcting? Let us knowUpdated September 08, 2023